$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS146270.roa File: AS146270.roa (raw, json) Hash identifier: sbQfUfm9qO99iuD/Sq+ju9I1bGQ3k+mS4py/7uVywjk= Subject key identifier: 28:22:92:72:94:66:AC:8E:94:BB:00:EC:85:9B:D8:31:BF:20:51:84 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 6A1F08B3EE865A716DE7D2F80D7EF8220FFB39AC Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS146270.roa Signing time: Wed 04 Mar 2026 06:34:58 +0000 ROA not before: Wed 04 Mar 2026 06:29:58 +0000 ROA not after: Wed 03 Mar 2027 06:34:58 +0000 asID: 146270 IP address blocks: 240a:ae24::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1f:08:b3:ee:86:5a:71:6d:e7:d2:f8:0d:7e:f8:22:0f:fb:39:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:29:58 2026 GMT Not After : Mar 3 06:34:58 2027 GMT Subject: CN=282292729466AC8E94BB00EC859BD831BF205184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:4d:b5:6f:b5:71:ea:79:16:b2:bd:6b:67: d0:82:61:c5:a1:6c:9c:ea:f3:d5:a5:01:b7:a6:2b: 1a:2f:ff:67:98:f7:46:e5:eb:0d:01:22:20:56:ef: 46:4e:46:a5:aa:ac:35:b5:d6:8d:59:69:b7:46:ce: e6:1d:33:cc:d4:51:6b:e3:a0:3e:b1:fa:27:de:9c: a7:2a:6d:14:76:86:5c:19:aa:99:b4:1a:83:86:69: fc:1f:6c:c0:07:d7:e8:a1:5f:23:b3:c2:1e:2a:31: c1:6d:a8:e2:ed:25:7a:68:7f:ba:9a:c1:93:ff:7f: 9d:14:4a:b1:32:97:07:25:88:9c:fa:d9:dc:a5:33: f5:0e:9d:bb:d2:4f:f8:5e:ac:ad:9a:13:24:f3:b8: 0b:aa:16:5b:11:ca:05:66:ba:41:6d:6d:58:3b:10: 29:d0:d9:ba:93:23:9a:2c:45:20:b5:67:96:13:25: 1c:06:73:0e:05:dd:49:9d:a0:88:0c:86:c4:93:10: 4c:d0:89:16:94:48:bb:6a:fc:57:f1:86:a3:b4:02: 3e:77:4e:d4:8c:92:e9:34:a9:b5:84:56:9d:70:49: 08:45:97:e2:45:d7:41:86:38:77:92:77:95:a2:8f: 3b:49:5b:7c:e2:f3:87:5f:4f:d7:69:66:79:3c:f4: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:22:92:72:94:66:AC:8E:94:BB:00:EC:85:9B:D8:31:BF:20:51:84 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS146270.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:ae24::/32 Signature Algorithm: sha256WithRSAEncryption 71:cf:29:e0:05:b0:d9:db:b4:f7:89:6b:1d:a0:65:e3:34:98: ee:27:c7:bc:70:cb:b7:ec:00:48:a7:d8:6f:63:cd:13:dc:34: 15:99:26:b2:a8:72:da:8b:05:33:74:14:16:a2:53:74:73:87: 1e:02:83:37:20:e1:e7:84:6f:1c:04:92:e7:03:8b:f9:c4:d6: c9:85:9c:fb:40:4c:ff:ce:78:76:09:83:16:80:ee:0e:00:21: 09:03:c0:67:e6:35:3f:e1:be:23:d3:6a:65:59:68:45:c9:17: ba:9d:4d:5c:2f:09:90:2d:7f:3c:2b:1f:fd:49:28:60:0c:cb: ee:17:21:61:c4:da:98:c2:19:9a:44:ac:3e:38:1c:9b:1f:ce: 1a:6f:46:fc:a1:98:61:2c:8d:4e:26:ce:1b:f1:54:52:62:26: 98:06:5d:ea:c3:7e:76:10:d9:73:3b:01:07:93:03:8f:16:c7: 74:5f:c0:3c:4d:4f:d6:dc:34:da:75:20:9f:d9:2d:49:76:43: 28:72:a9:54:da:86:b9:4a:e0:01:59:da:28:4c:40:3e:09:f3: 0c:a9:78:32:3b:28:af:68:be:66:eb:b7:a7:7e:d0:c3:0e:5e: 4e:24:de:77:8a:1c:2a:9d:de:ca:4f:9f:55:ca:23:8d:d8:f8: a3:f9:16:90 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUah8Is+6GWnFt59L4DX74Ig/7OawwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2Mjk1OFoX DTI3MDMwMzA2MzQ1OFowMzExMC8GA1UEAxMoMjgyMjkyNzI5NDY2QUM4RTk0QkIw MEVDODU5QkQ4MzFCRjIwNTE4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI1OTbVvtXHqeRayvWtn0IJhxaFsnOrz1aUBt6YrGi//Z5j3RuXrDQEiIFbv Rk5GpaqsNbXWjVlpt0bO5h0zzNRRa+OgPrH6J96cpyptFHaGXBmqmbQag4Zp/B9s wAfX6KFfI7PCHioxwW2o4u0lemh/uprBk/9/nRRKsTKXByWInPrZ3KUz9Q6du9JP +F6srZoTJPO4C6oWWxHKBWa6QW1tWDsQKdDZupMjmixFILVnlhMlHAZzDgXdSZ2g iAyGxJMQTNCJFpRIu2r8V/GGo7QCPndO1IyS6TSptYRWnXBJCEWX4kXXQYY4d5J3 laKPO0lbfOLzh19P12lmeTz0HIUCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQoIpJy lGasjpS7AOyFm9gxvyBRhDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NjI3MC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK riQwDQYJKoZIhvcNAQELBQADggEBAHHPKeAFsNnbtPeJax2gZeM0mO4nx7xwy7fs AEin2G9jzRPcNBWZJrKoctqLBTN0FBaiU3Rzhx4Cgzcg4eeEbxwEkucDi/nE1smF nPtATP/OeHYJgxaA7g4AIQkDwGfmNT/hviPTamVZaEXJF7qdTVwvCZAtfzwrH/1J KGAMy+4XIWHE2pjCGZpErD44HJsfzhpvRvyhmGEsjU4mzhvxVFJiJpgGXerDfnYQ 2XM7AQeTA48Wx3RfwDxNT9bcNNp1IJ/ZLUl2QyhyqVTahrlK4AFZ2ihMQD4J8wyp eDI7KK9ovmbrt6d+0MMOXk4k3neKHCqd3spPn1XKI43Y+KP5FpA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:50:07 2026 by rpki-client